Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192491/D0626D92AD2F11E98FF8D77FC4F9AE02/NMONZkm5DWjTzmwJ8euU0-V5_J0.mft
File:                     NMONZkm5DWjTzmwJ8euU0-V5_J0.mft (raw, json)
Hash identifier:          jsqWive3aB7YgYIbR0Hds4x9CDS2MWA/Ltc/G8eRguU=
Subject key identifier:   E2:B5:45:41:58:84:57:35:9A:47:3B:6C:68:29:75:7C:4F:D2:2A:FC
Authority key identifier: 34:C3:8D:66:49:B9:0D:68:D3:CE:6C:09:F1:EB:94:D3:E5:79:FC:9D
Certificate issuer:       /CN=A9192491/serialNumber=34C38D6649B90D68D3CE6C09F1EB94D3E579FC9D
Certificate serial:       0EA7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NMONZkm5DWjTzmwJ8euU0-V5_J0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192491/D0626D92AD2F11E98FF8D77FC4F9AE02/NMONZkm5DWjTzmwJ8euU0-V5_J0.mft
Manifest number:          0E9B
Signing time:             Thu 26 Mar 2026 17:39:25 +0000
Manifest this update:     Thu 26 Mar 2026 17:39:25 +0000
Manifest next update:     Thu 02 Apr 2026 17:39:25 +0000
Files and hashes:         1: NMONZkm5DWjTzmwJ8euU0-V5_J0.crl (hash: YD3JaO6fUYwZbeJ6ZOWujfEjh7CMOgiQEE0OSE0epPQ=)
                          2: 54AE11C6AD3211E9B3BC7385C4F9AE02.roa (hash: dp3B1RDsd11FNh3UQSta7bEw7zg/YxUAJYRv+iUtn2g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192491/D0626D92AD2F11E98FF8D77FC4F9AE02/NMONZkm5DWjTzmwJ8euU0-V5_J0.crl
                          rsync://rpki.apnic.net/member_repository/A9192491/D0626D92AD2F11E98FF8D77FC4F9AE02/NMONZkm5DWjTzmwJ8euU0-V5_J0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NMONZkm5DWjTzmwJ8euU0-V5_J0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 17:39:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3751 (0xea7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192491, serialNumber=34C38D6649B90D68D3CE6C09F1EB94D3E579FC9D
        Validity
            Not Before: Mar 26 17:39:25 2026 GMT
            Not After : Apr  2 17:39:25 2026 GMT
        Subject: CN=69c56f4d-58d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:8f:67:74:4d:24:14:72:cc:1a:90:10:c9:8e:
                    63:ea:a6:c7:d7:2d:65:2b:31:94:82:03:8c:0d:69:
                    a1:31:08:c4:09:c8:23:25:d4:ac:19:86:ee:53:4e:
                    59:b8:7e:99:e2:10:3b:ba:53:17:8c:e5:3b:15:f8:
                    43:eb:74:a1:8f:a4:c3:60:1c:ab:06:8b:80:e4:15:
                    c5:bc:a2:ea:db:14:08:7b:ec:ad:c6:65:07:cf:73:
                    c0:ac:19:4a:a5:d1:eb:48:3b:81:47:21:a1:3b:04:
                    46:81:3b:b0:c7:b9:15:f7:c9:ea:9b:c6:1b:e4:82:
                    de:f7:79:41:0f:64:6d:5c:d8:3d:76:44:86:51:88:
                    1e:da:e3:04:d8:d7:2e:2f:b4:06:b3:8c:c2:ba:fc:
                    44:6d:2c:de:f7:3f:bb:f5:c1:3b:08:11:e0:d5:56:
                    ca:e2:a7:cd:28:7c:01:37:83:8c:8f:31:80:e1:7f:
                    a3:42:32:f9:9c:20:a6:28:a3:b9:c8:16:97:74:7b:
                    55:04:7c:c4:d0:86:76:7e:e4:39:f5:72:fb:d5:5c:
                    5c:87:37:cb:aa:5e:2a:7b:b6:89:aa:d0:75:3d:d3:
                    77:be:4b:e4:06:7b:68:3d:55:97:a3:5c:dc:a2:0c:
                    1d:1b:10:e1:e3:18:b5:90:8c:87:bf:8b:cb:2a:60:
                    67:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:B5:45:41:58:84:57:35:9A:47:3B:6C:68:29:75:7C:4F:D2:2A:FC
            X509v3 Authority Key Identifier:
                keyid:34:C3:8D:66:49:B9:0D:68:D3:CE:6C:09:F1:EB:94:D3:E5:79:FC:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192491/D0626D92AD2F11E98FF8D77FC4F9AE02/NMONZkm5DWjTzmwJ8euU0-V5_J0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NMONZkm5DWjTzmwJ8euU0-V5_J0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192491/D0626D92AD2F11E98FF8D77FC4F9AE02/NMONZkm5DWjTzmwJ8euU0-V5_J0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:f5:34:a3:47:94:8e:1a:4c:74:e6:07:13:48:98:fe:f5:2e:
         f1:7f:da:e7:c9:fc:21:19:45:9b:df:4b:20:9b:4c:af:d7:b9:
         eb:2c:b9:3f:a6:5a:e4:ee:b6:19:51:59:ea:ba:4c:01:89:ea:
         77:ae:67:60:41:31:a4:e4:a5:6d:63:3d:d8:8a:56:7d:9e:64:
         73:35:41:07:16:65:0c:1c:dd:68:4a:b2:2c:db:c9:37:4a:e3:
         3d:c4:06:c4:b5:56:08:43:3f:c3:74:12:d8:07:4b:d6:2e:b9:
         d8:f6:af:46:60:08:b7:a6:eb:6b:59:62:5f:27:98:2f:e0:fe:
         39:cf:18:ca:bf:3c:fd:0e:1d:13:aa:17:c5:db:cf:90:8f:5b:
         46:4c:2d:10:bf:52:a4:16:4c:c1:a3:da:8c:e2:65:b9:a8:4c:
         68:90:38:1a:b5:e4:00:e7:1a:e8:5b:ec:e6:11:67:8f:fe:0d:
         57:7b:f0:48:04:7c:2f:5d:57:4a:e0:99:c2:5f:7c:07:b2:8f:
         77:00:10:2b:be:ae:28:51:22:3f:ef:10:a3:e2:43:c5:f9:ab:
         aa:4a:b2:9d:1b:63:6d:d3:7d:f0:17:c8:9c:f7:0b:88:fc:41:
         93:aa:92:4c:3e:5f:d4:7d:d3:c9:a8:a1:c8:6a:b2:3d:c1:66:
         5c:1f:cd:90
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDqcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTI0OTExMTAvBgNVBAUTKDM0QzM4RDY2NDlCOTBENjhEM0NFNkMwOUYxRUI5NEQz
RTU3OUZDOUQwHhcNMjYwMzI2MTczOTI1WhcNMjYwNDAyMTczOTI1WjAYMRYwFAYD
VQQDEw02OWM1NmY0ZC01OGQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz49ndE0kFHLMGpAQyY5j6qbH1y1lKzGUggOMDWmhMQjECcgjJdSsGYbuU05Z
uH6Z4hA7ulMXjOU7FfhD63Shj6TDYByrBouA5BXFvKLq2xQIe+ytxmUHz3PArBlK
pdHrSDuBRyGhOwRGgTuwx7kV98nqm8Yb5ILe93lBD2RtXNg9dkSGUYge2uME2Ncu
L7QGs4zCuvxEbSze9z+79cE7CBHg1VbK4qfNKHwBN4OMjzGA4X+jQjL5nCCmKKO5
yBaXdHtVBHzE0IZ2fuQ59XL71VxchzfLql4qe7aJqtB1PdN3vkvkBntoPVWXo1zc
ogwdGxDh4xi1kIyHv4vLKmBnrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOK1RUFY
hFc1mkc7bGgpdXxP0ir8MB8GA1UdIwQYMBaAFDTDjWZJuQ1o085sCfHrlNPlefyd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjQ5MS9EMDYyNkQ5MkFE
MkYxMUU5OEZGOEQ3N0ZDNEY5QUUwMi9OTU9OWmttNURXalR6bXdKOGV1VTAtVjVf
SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05NT05aa201RFdqVHptd0o4ZXVVMC1WNV9KMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MjQ5MS9EMDYyNkQ5MkFEMkYxMUU5OEZGOEQ3N0ZDNEY5QUUwMi9OTU9OWmttNURX
alR6bXdKOGV1VTAtVjVfSjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAevU0o0eUjhpMdOYHE0iY/vUu8X/a58n8IRlFm99LIJtMr9e56yy5P6Za5O62
GVFZ6rpMAYnqd65nYEExpOSlbWM92IpWfZ5kczVBBxZlDBzdaEqyLNvJN0rjPcQG
xLVWCEM/w3QS2AdL1i652PavRmAIt6bra1liXyeYL+D+Oc8Yyr88/Q4dE6oXxdvP
kI9bRkwtEL9SpBZMwaPajOJluahMaJA4GrXkAOca6Fvs5hFnj/4NV3vwSAR8L11X
SuCZwl98B7KPdwAQK76uKFEiP+8Qo+JDxfmrqkqynRtjbdN98BfInPcLiPxBk6qS
TD5f1H3TyaihyGqyPcFmXB/NkA==
-----END CERTIFICATE-----
Generated at Sat Mar 28 10:41:58 2026 by rpki-client